Privacy Policy

1. Data we collect

Information you provide

• Account data: name, email address, password (stored hashed), and organization details.
• Customer Content: project descriptions, tickets, comments, prompts, instructions, and code or repositories you connect.
• Support and communications: messages you send us and their contents.

Information collected automatically

• Usage and log data: IP address, device and browser information, pages viewed, actions taken, and timestamps.
• Cookies and similar technologies: as described in our Cookie Policy.

Information from third parties

• Payment data: our payment processor, Paddle, provides transaction status and limited billing details. We do not store full card numbers.
• Integrations: when you connect a version-control or other provider, we receive the data you authorize.

2. How we use data

• To provide, operate, secure, and improve the Service.
• To run agent sessions and process the work you request.
• To process payments and manage credits via our payment processor.
• To communicate with you about your account, security, and support.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our terms.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service); legitimate interests (to secure and improve the Service); consent (for certain cookies and communications, which you can withdraw); and legal obligation (for tax and compliance).

4. AI model processing

To generate Output, the content you submit may be transmitted to AI model providers (such as Anthropic) under their terms. Where the platform key is used, we send requests on your behalf; where you bring your own key, requests are made under your provider account. We do not use your Customer Content to train our own models, and we contract with providers who do not train their models on data submitted via their API by default.

5. How we share data

We share personal data only as needed:

• Service providers / sub-processors that host and support the Service, listed on our Sub-processors page.
• Payment processor (Paddle.com Market Limited and its affiliates ("Paddle")) to take payment and meet tax and accounting obligations.
• Integrations you authorize, such as your version-control provider.
• Legal and safety recipients where required by law or to protect rights, property, or safety.
• Business transfers in connection with a merger, acquisition, or sale of assets.

We do not sell your personal data.

6. International transfers

We and our sub-processors may process data in countries other than your own. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect transferred data.

7. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service, then for the period required to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. You can request deletion as described below.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. You may also have the right to lodge a complaint with a supervisory authority. To exercise your rights, contact privacy@alexich.ai. We will respond within the time required by applicable law.

If you are in California, you have rights under the CCPA/CPRA, including the right to know, delete, and correct, and to opt out of "sharing" for cross-context behavioral advertising. We do not sell personal information.

9. Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, encryption of sensitive secrets at rest, access controls, and isolated, ephemeral execution sandboxes for agent runs. No method of transmission or storage is completely secure. Report security concerns to security@alexich.ai.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "last updated" date and, for material changes, provide additional notice.

12. Contact

For privacy questions or requests, contact privacy@alexich.ai or write to Individual Entrepreneur Oleksii Zinkevych, Petra Kalnyshevskoho st. 1A, Kyiv, 04202, Ukraine.